Sunbelt Computer Software

PL/B Language Development and Support

History for actions/ql - github/codeql · GitHub

Commits

History for

oncodeql-cli/latest

Commits on Aug 20, 2026

Release preparation for version 2.26.4
github-actions[bot]
committed
2bbab1b

Commits on Aug 19, 2026

Merge pull request #22368 from computersarebad/actor-if-check-event-validity
jketema
authored
039c2b5
Split change note into breaking and minorAnalysis notes

computersarebad
and
Copilot
committed
0a376e8
Actions: Fix typo in change note
jketema
committed
9919db5

Commits on Aug 18, 2026

Add test coverage for sender, head_commit and commits checks

computersarebad
and
Copilot
committed
dc6ee11
Simplify EventActorIfCheck by binding context_prefix as a field

computersarebad
and
Copilot
committed
e9d9d3a
Split payload-field actor checks into EventActorIfCheck

computersarebad
and
Copilot
committed
3048f47

Commits on Aug 17, 2026

Actions: ActorIfCheck should not protect events that do not populate the checked field

computersarebad
and
Copilot
committed
9251d21

Commits on Aug 12, 2026

Merge branch 'main' into fix-actions-unpinned-reusable-workflows
theinfosecguy
authored
ed82161
Simplify composite action lookup
theinfosecguy
committed
710a753

Commits on Aug 11, 2026

Merge branch 'main' into knewbury01/customize-actions-sanitizers
mbaluda
authored
72ad4e5

Commits on Aug 6, 2026

Post-release preparation for codeql-cli-2.26.3
github-actions[bot]
committed
47d6b11
Release preparation for version 2.26.3
github-actions[bot]
committed
fae4a92

Commits on Aug 5, 2026

Commits on Aug 4, 2026

Commits on Aug 3, 2026

Actions: Remove experimental self-hosted runner query
JarLob
committed
7a7dae0

Commits on Jul 31, 2026

Add change note
JarLob
committed
caf91c9
Reworded the misleading 'Unprivileged'
JarLob
committed
c40fe85
Merge github/main into fix/actions-cache-poisoning-cache-write-access
JarLob
committed
827af90
Remove unreachable workflow_call cache access handling
JarLob
committed
cd7f6b7
Add tests
JarLob
committed
1900b61
Constrain Actions source helper evaluation
JarLob
committed
8a89360
Merge remote-tracking branch 'github/main' into fix/actions-output-clobbering-regex
JarLob
committed
c9727af
Merge pull request #22243 from JarLob/improve/actions-untrusted-checkout-source-link
aschackmull
authored
ddb7e3f
Merge pull request #22235 from JarLob/fix/actions-envvar-injection-precision
aschackmull
authored
0fb9774
Merge branch 'main' into improve/actions-untrusted-checkout-source-link
JarLob
authored
a44c25c
Apply batched suggestions from code review

JarLob
and
aschackmull
authored
9d147bc
Delay envvar event-name correlation
JarLob
committed
de68881
Fix FP in envvar injection
JarLob
committed
26da3e7
Merge remote-tracking branch 'github/main' into improve-clobbering-query-message
JarLob
committed
7f5c922
The regex wasn't escaping external input
JarLob
committed
b9a5dd4
Merge pull request #22236 from JarLob/fix/actions-merge-group-event-mapping
aschackmull
authored
5def214